Privacy policy

01 / OPERATOR

Who we are

Dashflo is operated by PT. ARYADUTA International Management ("we", "us", or "our"). This policy covers the Dashflo mobile app and dashboard, including sign-in, hotel performance information, notifications, and chat when it is available to your account.

For privacy questions or requests concerning your information, contact aho.it@aryaduta.com.

02 / INFORMATION

Information we process

Work-account information

Your name, work email address, user identifier, role, and assigned properties. Google sign-in verifies your identity, and Dashflo checks your authorized account access.

Hotel and business records

Revenue, performance, reservation, and related operational records for the properties you are authorized to view. Depending on the record, this can include customer, group, event, or staff information supplied through the organization's business systems.

Notifications and device identifiers

Push registration tokens, installation identifiers, device platform, associated account and property details, and notification content and delivery records. Firebase Cloud Messaging supports push delivery. Some service identifiers may be processed when the messaging service initializes, separately from your permission to display notifications.

Access and technical records

Sign-in and request records, account identifiers, IP address, browser or device information, timestamps, and operational or error details used to maintain and secure the service.

Chat, where available

If you use Dashflo chat, your messages and account-linked conversation identifiers are sent to the configured chat service and its model providers to produce responses and maintain conversation context. Do not include personal or confidential information that is unnecessary for your work question.

Information stored on your device

A session token, appearance preferences, and cached dashboard and notification state help maintain your session and app experience. Clearing app storage removes local information and may sign you out; it does not delete server records.

03 / PURPOSE

How information is used

• Authenticate your account and enforce role and property access permissions.
• Display hotel reports, reservations, and operational information.
• Deliver property-related alerts and maintain notification history.
• Respond to chat requests when that feature is enabled for your account.
• Maintain sessions and preferences, investigate errors, audit access, and protect the service.
• Respond to support and privacy requests and meet applicable organizational and legal obligations.

04 / SERVICE PROVIDERS

Who processes information

Authorized personnel can access information according to their work responsibilities and assigned permissions. Service providers involved in hosting, authentication, notifications, and enabled chat features process information needed to provide those services.

Dashflo uses Google sign-in and Firebase Cloud Messaging. Chat requests, when enabled, are processed by the organization's configured gateway and model providers. Processing locations and provider practices depend on the services in use. Contact our IT team for information about the providers and processing arrangements relevant to your account.

Information may also be disclosed where required by applicable law or a valid legal request. Google's handling of information is described in the Google Privacy Policy.

05 / RETENTION & SECURITY

Keeping and protecting information

Retention depends on the type of record and the purpose for which it is held. Relevant considerations include whether your work account remains active, whether information is needed to operate the service, resolve a support or security issue, or satisfy applicable recordkeeping obligations. Business records, access logs, notification records, and provider-held chat records may have different retention periods.

Contact aho.it@aryaduta.com for the retention arrangements relevant to a particular record or to request deletion. Signing out, uninstalling the app, or disabling notifications does not automatically delete information held by our servers or service providers.

The app connects to the Dashflo production API over HTTPS and uses account and property permissions to restrict access. Android app backup is disabled for the app's session data. No transmission or storage method can guarantee absolute security.

06 / YOUR CHOICES

Access, correction, and deletion

Request deletion of your Dashflo account and associated personal data ↗

You can contact aho.it@aryaduta.com to ask about your information or request access, correction, or deletion. Include your work email and a description of your request. Do not send passwords or sign-in tokens.

We may need to verify your identity and coordinate with your organization's account administrator. Account permissions and business records are organization-managed. Some records may need to be retained for security, recordkeeping, or legal purposes; the response to your request will explain any applicable limitations.

You can control notification permission in Android settings, change appearance in Profile, and log out when you have finished using the app. These controls do not replace a request to delete server-side information.

07 / AUDIENCE & UPDATES

Who the app is for

Dashflo is intended for authorized organizational users and is not directed to children. It is not a public account-registration service.

This policy may be updated as the app or its data practices change. The latest version will appear on this page with an updated date.